About this policy
MotJuste is a vocabulary and writing service available at motjuste.online and through its browser extension. This policy explains information handled when you browse, search, create an account, use learning tools, connect the extension, contact us, or choose optional analytics. Public vocabulary search does not require an account.
The policy covers MotJuste-operated features. External websites opened through links, including payment and browser-store services, have their own privacy policies. For questions or requests, contact support@motjuste.online.
Information you provide
You may provide an email address, display name, password, search text, selected writing preferences, saved vocabulary, collection names, notes, practice sentences, suggestions, and support messages. We do not ask for a postal address, phone number, date of birth, or full payment-card details to create a MotJuste account.
Like other internet services, our servers receive network and request information needed to deliver responses and protect the service. This is separate from optional usage analytics.
Account information
Accounts store an internal account identifier, email address, display name, password hash, account role and creation time. These support login, personalized vocabulary and learning features, account administration, recovery and security messages. Your profile and personal library are not published as a public directory.
Email verification stores a verification timestamp and a hashed, single-use token linked to the account and email address. Links expire after 24 hours; resending replaces earlier links. Successful verification deletes outstanding verification tokens and signs out existing sessions. Expired unused tokens remain until replacement, password/security actions, or account deletion; expiry alone does not imply physical deletion. Verification messages are sent through the configured transactional email provider.
Passwords are processed to authenticate you and stored as salted password hashes, not as readable passwords. The extension does not collect or store your account password.
Authentication and sessions
The website uses an essential HttpOnly session cookie. Production cookies use Secure and SameSite protections. The server stores a hash of the session token, its account association, creation time, expiry and remember-me setting.
A normal session is valid for up to 12 hours. Remember-me sessions last up to 7 days; revocation or password changes can end them earlier. Cookie restoration can depend on browser settings. Signing out invalidates that website session and extension connections linked to it. Changing or resetting a password, or revoking all sessions, invalidates the associated connections.
Extension pairing uses a short-lived code and a separate device secret. Pairings expire after 10 minutes. An approved connection uses an opaque token stored locally by the extension; the server stores its hash and binds it to the permitted extension origin and the website session. Tokens are not passwords, but should still be treated as sensitive.
Search and writing activity
MotJuste processes the words, phrases, passages and filters you submit to return vocabulary, grammatical forms and writing suggestions. Search combines local lexical retrieval and a self-hosted embedding service. Search text is not sent to a paid generative-AI provider or to Notion.
Ordinary searches are not written to an account search-history table. An explicitly saved search does store its label, query and filters with your account. Query text may also appear in a website URL and your own browser history. Autocomplete sends a short query in a request URL, which may appear in operational access logs.
The embedding service uses a bounded in-memory cache of query text and vectors. Cached results are reusable for five minutes; expired entries can remain in process memory until evicted or the process restarts. This is not a permanent search-history database. Do not put passwords or other unnecessary sensitive information into search fields.
Personal vocabulary and collections
Your account stores words you save, favorite flags, learning stages, personal notes, review intervals, due dates and last-viewed times where that action is used. Collections store their names and word memberships. Saved searches store their labels and selected search settings.
This data supplies your library, recommendations and learning tools. Personal notes and saved writing are not part of the public editorial vocabulary. The extension receives the personal word status and collection information it needs; it does not receive your private notes.
Learning and sentence practice
Learning settings include genre interests, daily goal, timezone and preferred study time. Review confidence selections update the word’s learning stage, review interval and due date; the service records a review event and time. It does not retain a separate history of every confidence value.
Recall, spelling, synonym and word-form answers in the review interface are checked in the browser rather than stored as individual answer transcripts. Sentence-check requests are processed by MotJuste. If you choose to save sentence practice, the sentence, feedback, word and creation time are stored with your account. Accepted saved practice can also create a study event.
Browser extension
The extension runs when you open its popup or invoke its selection context menu or keyboard shortcut. It does not run a continuous page-scraping content script. It does not collect your complete browsing history, every page visited, unrelated page addresses, keystroke logs or mouse movements.
The contextMenus permission provides selection actions; activeTab and scripting allow a bundled selection-capture function to run on the active tab after your action; storage keeps extension preferences, recent words and connection state. The only persistent host permission is https://motjuste.online/* for the MotJuste API.
Local storage holds theme choice, analytics preference, an optional analytics visitor identifier, a connection token when connected, and up to eight recent canonical word names and links. Those recent words are result entries, not a record of full typed passages. Clear recent words removes that list. Disconnect removes the local token and requests server-side revocation.
Selected webpage text and context
Opening the popup with text selected, or invoking a selection action, can capture and automatically look up up to 400 selected characters. Typing and submitting text also sends it to MotJuste. This selected text is website content for browser-store disclosure purposes.
The extension may read limited nearby text locally to offer sentence context: up to 140 characters on either side, with a total context limit of 400 characters. Nearby context is not sent unless you select “Use nearby context.” It is shown for review. Password inputs and several sensitive autocomplete field types are excluded, but these safeguards cannot identify every sensitive passage.
The extension does not upload a full webpage or the source page URL with a lookup. Temporary selection and pairing state use browser-session storage; pending selection is removed when the popup consumes it. Submitted text is processed for the requested lookup, subject to the search-cache and operational-log distinctions in this policy.
Raw selected passages and context are not retained in usage analytics. With analytics enabled, a matched public dictionary word may be recorded as a usage detail. A dictionary word can coincide with the single word you selected; we therefore do not claim that no selected word ever appears in analytics.
Optional first-party analytics
Website analytics are off until you enable them in that browser. Extension analytics have a separate “Share optional usage counts” switch, also off by default. Collection additionally requires analytics to be enabled on the server. The collector respects Do Not Track and Global Privacy Control signals when supplied by the request.
With consent, MotJuste can measure page views, visits, approximate sessions, registrations, sign-ins, searches and result types, zero-result searches, saved-word actions, favorites, collections, learning stages, practice and learning-session activity. Mood tools can record the selected approved mood, intensity level and related action. Extension counts can include activation, lookups, full-entry opens and personal-library actions.
Events can contain a timestamp, event identifier, hashed visitor identifier, a hashed account identifier when signed in, a session identifier, website-versus-extension source, an allowed site-path category, coarse browser/device/operating-system categories and a categorized referrer. These are pseudonymous records, not a promise of complete anonymity. A new analytics session is assigned after more than 30 minutes of inactivity.
Only controlled details such as a public dictionary term or an approved mood/intensity value are used for those statistics. Raw free-text queries, selected passages, practice sentences, notes, passwords, tokens and source-page URLs are not analytics fields. The website may send the referring site origin for categorization; query strings are not included by the analytics client. Owner reports present aggregated usage and breakdowns, while the underlying event records are retained for the periods below.
Optional usage measurement
Help improve MotJuste by allowing first-party usage analytics. This is off until you choose to enable it.
Analytics versus necessary product state
Turning off analytics stops future optional measurement from that browser; it does not stop necessary account, vocabulary, practice, announcement-read or security processing. For example, saving a word still updates your account even when usage measurement is disabled.
An opt-out does not automatically erase previously collected analytics records or aggregate counts. Contact us for an applicable data request. Extension and website consent settings are independent.
Cookies and device storage
The motjuste_session cookie is necessary for signed-in website features. A remembered session persists for up to seven days. Website analytics-consent and visitor cookies, named motjuste_analytics and motjuste_visitor, have a 90-day lifetime; opting out removes the visitor cookie and records the consent choice.
The website also uses browser storage for theme, result-view preference, writing mode and analytics preference. Extension settings and recent words use local extension storage rather than browser sync storage. Pairing and captured selection use temporary session storage. Clearing site or extension storage may reset preferences or sign you out.
Local extension storage is not an encrypted password vault. MotJuste restricts access to its trusted extension contexts, but anyone with access to your browser profile or device may be able to access locally stored information.
Transactional email and recovery
MotJuste uses the account email address for requested password-reset messages and account/security notifications. The configured mail service is Hostinger business email, using authenticated encrypted SMTP. The provider and your receiving mail service process recipient addresses, message content and delivery metadata.
Reset links are single-use and expire after 30 minutes. The database stores a hash of the reset token. Token expiry prevents use; it does not mean every expired database row or email is immediately erased. Successful resets consume the token and revoke sessions. No newsletter or marketing-email sending flow is implemented.
Suggestions and announcements
Suggestions, corrections and reports store the submitted text, category, moderation state and, when signed in, an account association. Suggestions enter editorial review. Public display requires the submission’s public opt-in and approval. Do not include private information in text you intend to make public.
For signed-in readers, marking an announcement as read stores its identifier and read time with the account. This is functional account state, not optional analytics.
Support and donations
Support messages sent to support@motjuste.online contain your email address and anything you choose to share. Please do not email account passwords, session tokens or unnecessary sensitive information.
When donations are enabled, the Support page opens an external PayPal link. PayPal handles the payment and its own collection of financial information. MotJuste has no card-entry form or payment-processing backend and does not directly receive full card or bank credentials through the application. The recipient may receive transaction information made available by PayPal.
Why we use information
We use information to provide searches and account features you request, personalize learning, maintain vocabulary quality, process support and recovery requests, protect accounts, diagnose service problems and maintain backups. Optional analytics help us understand use and improve the service.
Where privacy law distinguishes processing grounds, requested service delivery, security and operational needs, applicable legal obligations and your choices about optional analytics are relevant to these uses. The precise rights and grounds that apply depend on your location and circumstances. This policy does not treat use of the site as blanket consent to unrelated processing.
Services involved
The production hosting infrastructure runs the website, database, backups and self-hosted search model. Hostinger business email delivers transactional mail. PayPal handles optional donations when configured. Google’s Chrome Web Store and supported browsers handle extension distribution, updates and browser-level permissions under their own policies.
Notion is the editorial vocabulary source. A server-side integration reads approved public vocabulary fields; user accounts, personal notes, saved vocabulary and practice records are stored in MotJuste’s database, not sent to Notion by these features.
When enabled, IndexNow notifies participating search engines about changed public vocabulary URLs. It does not submit private libraries or search queries. Public pages may also be crawled by search engines. Fonts and extension scripts are supplied with MotJuste rather than fetched from advertising or third-party script CDNs.
How long information stays
Account and personal-learning records remain while your account exists or until removed through available controls or an applicable request. Collections and saved searches can be deleted separately. Review history, saved practice and account preferences are not currently subject to a separate automatic age-based deletion schedule.
The worker deletes detailed analytics events older than 90 days, hourly identity/presence records older than 400 days, and visitor records last seen more than 400 days ago. Hourly aggregate event counts have no automatic expiry configured in the application. Cleanup depends on the worker running successfully; it is not instantaneous.
Sessions and extension tokens expire according to their session limits, and the worker removes expired session, pairing, connection-token and rate-limit records. Reset tokens expire after 30 minutes; expired reset rows can remain until replaced, consumed or removed with the account. Suggestions and support correspondence have no fixed automatic retention period established in the application.
Local extension preferences and recent words stay until cleared, replaced or removed with extension/browser data. Query-cache entries are limited by cache capacity and process lifetime as described above. Server-log and backup retention are operational settings, not established by this policy as a verified fixed number of days. Contact us about retention and requests; copies may persist temporarily in protected backups.
Operational and security logs
The infrastructure can process IP addresses, timestamps, requested paths, query strings, response codes and technical errors for operation and security. In particular, URLs containing search text may be visible to access logs even though raw search text is not an analytics field. MotJuste’s application does not deliberately create a raw search-body logging stream.
Abuse-control counters use keyed hashes of network identifiers and, for applicable authentication limits, account identifiers. Passwords, mail credentials and session tokens are not intentionally printed by normal application logging. We cannot promise that all infrastructure logs have identical contents or retention; these operational settings require separate administration.
Security measures
Measures include HTTPS, salted password hashing, hashed server-side session and recovery tokens, session expiry and revocation, server-side account/role checks, restricted extension origins, request-origin checks and abuse limits. Production secrets are supplied server-side and are not bundled in the extension.
Backups support recovery and database access is restricted to the service infrastructure. No online service or device storage is completely secure. Contact us promptly if you suspect unauthorized account access, and use password reset or session revocation when appropriate.
Your choices and controls
You can browse without an account; change your display name and password; sign out or revoke sessions; manage favorites, notes, learning settings and collections; delete collections and saved searches; clear extension recent words; disconnect the extension; and change website or extension analytics choices independently.
Nearby context is optional for extension searches. You can uninstall the extension or clear browser storage. Some item-level removal controls, including removal of an entire saved-word record, are not currently exposed. Contact support for removal or correction that is not available in the interface.
Deleting your account
Account Settings provides account deletion, requiring your current password and a confirmation. It deletes the account and linked sessions, extension connections, personal words and notes, collections and memberships, saved searches, writer preferences, study events, saved practice, votes and announcement-read records from the active database.
Suggestions are retained with their account association removed; text you included in them may still identify you. Pseudonymous analytics records are not automatically linked by database deletion rules and may remain until normal expiry or an applicable request. Aggregate counts, operational records, support correspondence and protected backups may also remain. Account deletion does not automatically clear local extension recents or every browser copy.
Access and correction requests
Email support@motjuste.online to request access, correction or deletion, or to raise a privacy concern. Identify the account or information concerned without sending your password. We may need to verify that the request is yours and clarify its scope.
Depending on applicable law, you may have additional rights concerning objection, restriction, portability, consent withdrawal or a complaint to your local authority. We assess requests under applicable requirements and explain relevant limitations. There is no automatic full-account export interface at present.
Children and international users
MotJuste is a general writing tool, not a service specifically directed to children below the age requiring additional protections under applicable privacy laws. The account form does not collect a date of birth or implement age verification. If a child’s information may have been provided improperly, contact support so it can be reviewed.
Accessing MotJuste from another country may involve processing by hosting, email or browser-service infrastructure outside your country. This policy does not claim a particular data-residency location or transfer certification. Contact us for available information about the relevant infrastructure.
Policy changes and contact
We update this page when the product or its data handling changes and revise the date above. Material changes should be reviewed before you use new features; any new optional processing should have appropriate controls rather than being silently treated as already accepted.
Privacy and support contact: support@motjuste.online. This is a public service mailbox; do not send credentials or unnecessary sensitive information.